Add operator console, observability, skills, and resilience/security hardening

Add memory PII guardrails and email policy tightening

Add retention windows and startup credential safety warnings

Add security maintenance workflows and auth warning coverage